From Fedora Project Wiki

(adding a comment)
Line 1: Line 1:
Q1: How would encryption of /home and / sub volumes be implemented?
+
Q1: How would encryption of /home and / subvolumes be implemented?
  
 
A1: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.
 
A1: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.
  
 
Comment1: Sounds great. Thanks for the information.Should this be documented in https://fedoraproject.org/wiki/Changes/BtrfsByDefault#Detailed_Description or is the 'on-LUKS' not default?
 
Comment1: Sounds great. Thanks for the information.Should this be documented in https://fedoraproject.org/wiki/Changes/BtrfsByDefault#Detailed_Description or is the 'on-LUKS' not default?

Revision as of 09:03, 26 June 2020

Q1: How would encryption of /home and / subvolumes be implemented?

A1: For the F33 timeline, we plan to stick with Btrfs-on-LUKS, so there will be one big LUKS partition, on top of which there will a Btrfs with multiple subvolumes (root and home). In future, once Btrfs implements native encryption (this is work in progress upstream), we will propose to make a switch, but this is definitely not going to happen in F33.

Comment1: Sounds great. Thanks for the information.Should this be documented in https://fedoraproject.org/wiki/Changes/BtrfsByDefault#Detailed_Description or is the 'on-LUKS' not default?